Getting a "403 access denied" error instead of serving file (using django, gunicorn nginx)
You should use root:
location /protected/ {
internal;
root /home/user;
}
instead of your alias:
location /protected/ {
internal;
alias /home/user/protected;
}